README — GET /api/v1/orgs/invitations
Read invitations to the signed-in person#
GET /api/v1/orgs/invitations · Operation ID: listMyOrgInvitationsApplication use#
Invitations are matched to the human account verified email. This is not a school roster or an invitation inbox for the student pool. An unverified account does not discover invitations; no verified email means an empty list. Let the person choose whether to join.Authentication and permission#
Bearer credential with orgs:read. User identity with matching verified customer email and orgs:read.Scopes, membership, current role, effective policy and applicable plan checks all apply. A managed student token cannot grant organisation-management authority. A student-pool login JWT is not a public-API bearer credential. See Classroom identity and roles.Example#
Replace placeholders using an authorised disposable test class. Mutation examples change real data when run. Keep tokens on the server; never copy student credentials into diagnostics.curl --fail-with-body -X GET 'https://handwrites.io/api/v1/orgs/invitations' \
-H "Authorization: Bearer $HANDWRITE_API_TOKEN"
Responses and recovery#
| Status | Meaning | Format |
|---|
| 200 | Pending invitations. | application/json |
| 401 | unauthorized: no token, or it's invalid, revoked or expired. | application/json |
| 403 | insufficient_scope, forbidden (you can see it but not do this), app_test_restricted, account_deleted (the account is scheduled for deletion; any request). | application/json |
| 429 | rate_limited (burst or daily cap) or quota_exceeded (no characters left). | application/json |
| 500 | internal_error. | application/json |
The paired API reference holds the shared machine-readable schema. Additional role, policy, seat and plan failures are described in API specification notes. Do not parse 204 or 304 responses as JSON, and do not treat 403 as a transient retry.Modified at 2026-10-26 13:24:24